# Vulnerabilities published in 2025


- [MAL-2025-139375](https://insights.sbomify.com/MAL-2025-139375/): Malicious code in andromeda-csrf-got-tool (npm) (malicious package)
- [MAL-2025-139374](https://insights.sbomify.com/MAL-2025-139374/): Malicious code in andromeda-config-eslint-alphard (npm) (malicious package)
- [MAL-2025-139373](https://insights.sbomify.com/MAL-2025-139373/): Malicious code in andromeda-chromedriver-async-jasmine (npm) (malicious package)
- [MAL-2025-139372](https://insights.sbomify.com/MAL-2025-139372/): Malicious code in altair-xerxes-postcss-postgres (npm) (malicious package)
- [MAL-2025-139371](https://insights.sbomify.com/MAL-2025-139371/): Malicious code in altair-umbriel-child-process-cross-env (npm) (malicious package)
- [MAL-2025-139370](https://insights.sbomify.com/MAL-2025-139370/): Malicious code in altair-ultra-grunt-gravity (npm) (malicious package)
- [MAL-2025-13937](https://insights.sbomify.com/MAL-2025-13937/): Malicious code in aa-bb-xx (npm) (malicious package)
- [MAL-2025-139369](https://insights.sbomify.com/MAL-2025-139369/): Malicious code in altair-tool-async-passport (npm) (malicious package)
- [MAL-2025-139368](https://insights.sbomify.com/MAL-2025-139368/): Malicious code in altair-subscription-flare-loglevel (npm) (malicious package)
- [MAL-2025-139367](https://insights.sbomify.com/MAL-2025-139367/): Malicious code in altair-soap-lacerta-kastra (npm) (malicious package)
- [MAL-2025-139366](https://insights.sbomify.com/MAL-2025-139366/): Malicious code in altair-scripts-dagda-sedna (npm) (malicious package)
- [MAL-2025-139365](https://insights.sbomify.com/MAL-2025-139365/): Malicious code in altair-sails-izar-warp (npm) (malicious package)
- [MAL-2025-139364](https://insights.sbomify.com/MAL-2025-139364/): Malicious code in altair-rollup-plugin-jasmine-chai (npm) (malicious package)
- [MAL-2025-139363](https://insights.sbomify.com/MAL-2025-139363/): Malicious code in altair-rollup-bootstrap-webdriver-manager (npm) (malicious package)
- [MAL-2025-139362](https://insights.sbomify.com/MAL-2025-139362/): Malicious code in altair-radiant-comet-schema (npm) (malicious package)
- [MAL-2025-139361](https://insights.sbomify.com/MAL-2025-139361/): Malicious code in altair-pulsar-run-script-procyon (npm) (malicious package)
- [MAL-2025-139360](https://insights.sbomify.com/MAL-2025-139360/): Malicious code in altair-promise-castor-heka (npm) (malicious package)
- [MAL-2025-13936](https://insights.sbomify.com/MAL-2025-13936/): Malicious code in a5ovsk (npm) (malicious package)
- [MAL-2025-139359](https://insights.sbomify.com/MAL-2025-139359/): Malicious code in altair-procyon-impulse-socketio (npm) (malicious package)
- [MAL-2025-139358](https://insights.sbomify.com/MAL-2025-139358/): Malicious code in altair-playwright-webpack-comet (npm) (malicious package)
- [MAL-2025-139357](https://insights.sbomify.com/MAL-2025-139357/): Malicious code in altair-nebula-vulcan-indus (npm) (malicious package)
- [MAL-2025-139356](https://insights.sbomify.com/MAL-2025-139356/): Malicious code in altair-native-webpack-perseus (npm) (malicious package)
- [MAL-2025-139355](https://insights.sbomify.com/MAL-2025-139355/): Malicious code in altair-meteor-rollup-solis (npm) (malicious package)
- [MAL-2025-139354](https://insights.sbomify.com/MAL-2025-139354/): Malicious code in altair-mensa-cypress-node-sass (npm) (malicious package)
- [MAL-2025-139353](https://insights.sbomify.com/MAL-2025-139353/): Malicious code in altair-husky-elektra-izar (npm) (malicious package)
- [MAL-2025-139352](https://insights.sbomify.com/MAL-2025-139352/): Malicious code in altair-fusion-lyra-nebula (npm) (malicious package)
- [MAL-2025-139351](https://insights.sbomify.com/MAL-2025-139351/): Malicious code in altair-farout-antd-await (npm) (malicious package)
- [MAL-2025-139350](https://insights.sbomify.com/MAL-2025-139350/): Malicious code in altair-dependencies-foundation-rate-limiter (npm) (malicious package)
- [MAL-2025-13935](https://insights.sbomify.com/MAL-2025-13935/): Malicious code in a2z-promo-tool (npm) (malicious package)
- [MAL-2025-139349](https://insights.sbomify.com/MAL-2025-139349/): Malicious code in altair-css-loader-fornax-nightmare (npm) (malicious package)
- [MAL-2025-139348](https://insights.sbomify.com/MAL-2025-139348/): Malicious code in altair-chai-transform-graphql (npm) (malicious package)
- [MAL-2025-139347](https://insights.sbomify.com/MAL-2025-139347/): Malicious code in altair-ceres-superagent-andromeda (npm) (malicious package)
- [MAL-2025-139346](https://insights.sbomify.com/MAL-2025-139346/): Malicious code in altair-betelgeuse-enceladus-callisto (npm) (malicious package)
- [MAL-2025-139345](https://insights.sbomify.com/MAL-2025-139345/): Malicious code in altair-airbnb-graphql-transform (npm) (malicious package)
- [MAL-2025-139344](https://insights.sbomify.com/MAL-2025-139344/): Malicious code in altair-aether-terser-callisto (npm) (malicious package)
- [MAL-2025-139343](https://insights.sbomify.com/MAL-2025-139343/): Malicious code in alphard-writable-enceladus-webdriverio (npm) (malicious package)
- [MAL-2025-139342](https://insights.sbomify.com/MAL-2025-139342/): Malicious code in alphard-test-dactyl-buffer (npm) (malicious package)
- [MAL-2025-139341](https://insights.sbomify.com/MAL-2025-139341/): Malicious code in alphard-superagent-antares-mysql (npm) (malicious package)
- [MAL-2025-139340](https://insights.sbomify.com/MAL-2025-139340/): Malicious code in alphard-rest-slides-markdownlint (npm) (malicious package)
- [MAL-2025-13934](https://insights.sbomify.com/MAL-2025-13934/): Malicious code in a12l-types (npm) (malicious package)
- [MAL-2025-139339](https://insights.sbomify.com/MAL-2025-139339/): Malicious code in alphard-quito-jsonp-europa (npm) (malicious package)
- [MAL-2025-139338](https://insights.sbomify.com/MAL-2025-139338/): Malicious code in alphard-pulsar-umbriel-chakra-ui (npm) (malicious package)
- [MAL-2025-139337](https://insights.sbomify.com/MAL-2025-139337/): Malicious code in alphard-pm2-centauri-pavo (npm) (malicious package)
- [MAL-2025-139336](https://insights.sbomify.com/MAL-2025-139336/): Malicious code in alphard-pipe-hapi-remark (npm) (malicious package)
- [MAL-2025-139335](https://insights.sbomify.com/MAL-2025-139335/): Malicious code in alphard-pino-quasar-eslint-plugin (npm) (malicious package)
- [MAL-2025-139334](https://insights.sbomify.com/MAL-2025-139334/): Malicious code in alphard-pegasus-server-antares (npm) (malicious package)
- [MAL-2025-139333](https://insights.sbomify.com/MAL-2025-139333/): Malicious code in alphard-odin-radiant-hapi (npm) (malicious package)
- [MAL-2025-139332](https://insights.sbomify.com/MAL-2025-139332/): Malicious code in alphard-nightwatch-reveal-md-sqlite (npm) (malicious package)
- [MAL-2025-139331](https://insights.sbomify.com/MAL-2025-139331/): Malicious code in alphard-neptune-nashira-sqlite (npm) (malicious package)
- [MAL-2025-139330](https://insights.sbomify.com/MAL-2025-139330/): Malicious code in alphard-mongoose-ursa-gridsome (npm) (malicious package)
- [MAL-2025-13933](https://insights.sbomify.com/MAL-2025-13933/): Malicious code in a12l-components (npm) (malicious package)
- [MAL-2025-139329](https://insights.sbomify.com/MAL-2025-139329/): Malicious code in alphard-karma-airbnb-figures (npm) (malicious package)
- [MAL-2025-139328](https://insights.sbomify.com/MAL-2025-139328/): Malicious code in alphard-jupiter-yonder-gravity (npm) (malicious package)
- [MAL-2025-139327](https://insights.sbomify.com/MAL-2025-139327/): Malicious code in alphard-indus-nconf-foundation (npm) (malicious package)
- [MAL-2025-139326](https://insights.sbomify.com/MAL-2025-139326/): Malicious code in alphard-hugo-enceladus-child-process (npm) (malicious package)
- [MAL-2025-139325](https://insights.sbomify.com/MAL-2025-139325/): Malicious code in alphard-halley-run-script-magellan (npm) (malicious package)
- [MAL-2025-139324](https://insights.sbomify.com/MAL-2025-139324/): Malicious code in alphard-fetch-corvus-command (npm) (malicious package)
- [MAL-2025-139323](https://insights.sbomify.com/MAL-2025-139323/): Malicious code in alphard-express-pulsar-schema (npm) (malicious package)
- [MAL-2025-139322](https://insights.sbomify.com/MAL-2025-139322/): Malicious code in alphard-enif-xenos-neptune (npm) (malicious package)
- [MAL-2025-139321](https://insights.sbomify.com/MAL-2025-139321/): Malicious code in alphard-eclipse-deneb-atlas (npm) (malicious package)
- [MAL-2025-139320](https://insights.sbomify.com/MAL-2025-139320/): Malicious code in alphard-cluster-reveal-md-sedna (npm) (malicious package)
- [MAL-2025-13932](https://insights.sbomify.com/MAL-2025-13932/): Malicious code in a-vailable-al-bum-file-sonic-boom-5n6il-dbjjlw (npm) (malicious package)
- [MAL-2025-139319](https://insights.sbomify.com/MAL-2025-139319/): Malicious code in alphard-cassini-graphql-warp (npm) (malicious package)
- [MAL-2025-139318](https://insights.sbomify.com/MAL-2025-139318/): Malicious code in alphard-avior-electron-unuk (npm) (malicious package)
- [MAL-2025-139317](https://insights.sbomify.com/MAL-2025-139317/): Malicious code in alphard-auth0-webdriverio-meissa (npm) (malicious package)
- [MAL-2025-139316](https://insights.sbomify.com/MAL-2025-139316/): Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm) (malicious package)
- [MAL-2025-139315](https://insights.sbomify.com/MAL-2025-139315/): Malicious code in alphard-altair-jupiter-stop (npm) (malicious package)
- [MAL-2025-139314](https://insights.sbomify.com/MAL-2025-139314/): Malicious code in algol-weywot-loopback-nodejs (npm) (malicious package)
- [MAL-2025-139313](https://insights.sbomify.com/MAL-2025-139313/): Malicious code in algol-vega-cosmos-sagitta (npm) (malicious package)
- [MAL-2025-139312](https://insights.sbomify.com/MAL-2025-139312/): Malicious code in algol-upgrade-ini-acamar (npm) (malicious package)
- [MAL-2025-139311](https://insights.sbomify.com/MAL-2025-139311/): Malicious code in algol-telesto-apex-chariklo (npm) (malicious package)
- [MAL-2025-139310](https://insights.sbomify.com/MAL-2025-139310/): Malicious code in algol-stream-node-config-enif (npm) (malicious package)
- [MAL-2025-13931](https://insights.sbomify.com/MAL-2025-13931/): Malicious code in a-vailable-al-bum-file-parachutes-1-3x39a-diweqq (npm) (malicious package)
- [MAL-2025-139309](https://insights.sbomify.com/MAL-2025-139309/): Malicious code in algol-semantic-release-umbriel-avior (npm) (malicious package)
- [MAL-2025-139308](https://insights.sbomify.com/MAL-2025-139308/): Malicious code in algol-sagitta-nodejs-ursa (npm) (malicious package)
- [MAL-2025-139307](https://insights.sbomify.com/MAL-2025-139307/): Malicious code in algol-rollup-uninstall-atlas (npm) (malicious package)
- [MAL-2025-139306](https://insights.sbomify.com/MAL-2025-139306/): Malicious code in algol-rate-limiter-capella-package (npm) (malicious package)
- [MAL-2025-139305](https://insights.sbomify.com/MAL-2025-139305/): Malicious code in algol-prompts-meissa-karma (npm) (malicious package)
- [MAL-2025-139304](https://insights.sbomify.com/MAL-2025-139304/): Malicious code in algol-pegasus-sass-loader-loop (npm) (malicious package)
- [MAL-2025-139303](https://insights.sbomify.com/MAL-2025-139303/): Malicious code in algol-pegasus-fornax-npm (npm) (malicious package)
- [MAL-2025-139302](https://insights.sbomify.com/MAL-2025-139302/): Malicious code in algol-package-eridanus-deneb (npm) (malicious package)
- [MAL-2025-139301](https://insights.sbomify.com/MAL-2025-139301/): Malicious code in algol-node-config-soap-odin (npm) (malicious package)
- [MAL-2025-139300](https://insights.sbomify.com/MAL-2025-139300/): Malicious code in algol-markdown-halley-regulus (npm) (malicious package)
- [MAL-2025-13930](https://insights.sbomify.com/MAL-2025-13930/): Malicious code in a-vailable-al-bum-file-los-angeles-1-79b00-rduaef (npm) (malicious package)
- [MAL-2025-1393](https://insights.sbomify.com/MAL-2025-1393/): Malicious code in bithumb-internal (npm) (malicious package)
- [MAL-2025-139299](https://insights.sbomify.com/MAL-2025-139299/): Malicious code in algol-magellan-framework-public (npm) (malicious package)
- [MAL-2025-139298](https://insights.sbomify.com/MAL-2025-139298/): Malicious code in algol-local-cordelia-vortex (npm) (malicious package)
- [MAL-2025-139297](https://insights.sbomify.com/MAL-2025-139297/): Malicious code in algol-levels-socketio-superagent (npm) (malicious package)
- [MAL-2025-139296](https://insights.sbomify.com/MAL-2025-139296/): Malicious code in algol-jsonp-bunyan-barnard (npm) (malicious package)
- [MAL-2025-139295](https://insights.sbomify.com/MAL-2025-139295/): Malicious code in algol-forever-regulus-miranda (npm) (malicious package)
- [MAL-2025-139294](https://insights.sbomify.com/MAL-2025-139294/): Malicious code in algol-dione-markdown-io (npm) (malicious package)
- [MAL-2025-139293](https://insights.sbomify.com/MAL-2025-139293/): Malicious code in algol-chromedriver-pegasus-kronos (npm) (malicious package)
- [MAL-2025-139292](https://insights.sbomify.com/MAL-2025-139292/): Malicious code in algol-chai-babel-meteor (npm) (malicious package)
- [MAL-2025-139291](https://insights.sbomify.com/MAL-2025-139291/): Malicious code in algol-axios-neptune-polaris (npm) (malicious package)
- [MAL-2025-139290](https://insights.sbomify.com/MAL-2025-139290/): Malicious code in algol-aurora-webdriverio-juno (npm) (malicious package)
- [MAL-2025-13929](https://insights.sbomify.com/MAL-2025-13929/): Malicious code in a-vailable-al-bum-file-emika-xmauh-mdepdk (npm) (malicious package)
- [MAL-2025-139289](https://insights.sbomify.com/MAL-2025-139289/): Malicious code in algol-aurora-uninstall-public (npm) (malicious package)
- [MAL-2025-139288](https://insights.sbomify.com/MAL-2025-139288/): Malicious code in algol-achernar-spectron-webdriver-dorado (npm) (malicious package)
- [MAL-2025-139287](https://insights.sbomify.com/MAL-2025-139287/): Malicious code in aldebaran-zenobia-package-blaze (npm) (malicious package)
- [MAL-2025-139286](https://insights.sbomify.com/MAL-2025-139286/): Malicious code in aldebaran-rimraf-meissa-public (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1495/